Treat non-widening sandbox requests as no-op grants
Generate escalation options from each session’s effective sandbox policy, omit impossible choices, and treat equal or narrower requests—including redundant same-mode requests—as no-op grants without prompts or approval events. Continue validating genuine policy changes consistently across Native and PTC schemas.
Explore challenge
The problem
Generate escalation options from each session’s effective sandbox policy, omit impossible choices, and treat equal or narrower requests—including redundant same-mode requests—as no-op grants without prompts or approval events. Continue validating genuine policy changes consistently across Native and PTC schemas.
Start with these discussions
- [Proposal] Make sandbox escalation session-aware and ignore redundant same-mode requestsgithub · ▲1 · 1 comments
- openai-responses models fill optional sandbox_permissions with the current mode, bricking all bash callsgithub · ▲1 · 0 comments
- Non-widening sandbox escalation fails closed when the session is already danger-full-accessgithub · ▲0 · 0 comments